Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/Oku0BkyaZP0ekDCgTsSP0ZuR32w.roa
File: Oku0BkyaZP0ekDCgTsSP0ZuR32w.roa (raw, json)
Hash identifier: BwX6HhpFkS2Z7mKdSNs+s6haUoAKmBhxsNzuT/Ak/i0=
Subject key identifier: 3A:4B:B4:06:4C:9A:64:FD:1E:90:30:A0:4E:C4:8F:D1:9B:91:DF:6C
Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial: 0193BAFCFD86CFA590D800C82905BA39DBD3
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/Oku0BkyaZP0ekDCgTsSP0ZuR32w.roa
Signing time: Thu 12 Dec 2024 13:09:22 +0000
ROA not before: Thu 12 Dec 2024 13:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199009
IP address blocks: 2a0e:eac0:2020::/44 maxlen: 48
2a0e:eac0:2020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:fc:fd:86:cf:a5:90:d8:00:c8:29:05:ba:39:db:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Validity
Not Before: Dec 12 13:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a4bb4064c9a64fd1e9030a04ec48fd19b91df6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:48:bd:84:94:51:d2:30:cc:b8:17:ab:cf:
8f:03:55:1c:ef:97:2e:a4:c2:2b:65:d0:13:cf:cc:
05:16:ee:d4:39:f9:78:28:44:24:e0:25:5b:f1:87:
7e:20:bb:90:35:c9:bd:2f:65:65:bf:bd:5d:58:b0:
d7:0f:2e:54:7f:27:3e:0a:32:d9:30:b2:8b:c0:d0:
1c:f7:df:e4:df:35:1d:6f:2b:75:90:65:a6:34:80:
01:55:85:69:be:7e:31:d6:7c:9b:ec:46:84:61:23:
b0:c5:96:23:f6:c4:0c:81:e0:93:ab:f6:a5:bc:e7:
c9:07:4e:6d:38:97:67:73:17:de:85:e4:83:06:36:
7b:b4:b3:9e:35:03:3c:c9:d2:b4:70:d9:6a:d2:1f:
5e:32:e0:6b:3b:e2:8d:73:22:a5:1f:7c:df:8c:30:
e9:cf:e1:89:d6:79:77:5b:b4:38:ef:44:dc:9c:bf:
5d:7f:0b:6d:db:de:92:10:c1:7b:fc:03:cd:e6:45:
24:b8:0b:b6:77:80:3a:a8:90:25:0e:c4:10:fa:8a:
70:d7:bb:67:c6:d7:94:1e:16:13:93:b7:20:76:39:
eb:6b:c6:f7:d7:27:a1:3d:82:5f:74:61:89:27:54:
91:38:d2:e7:c9:e3:79:63:9f:4d:18:2e:f1:7c:12:
6f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4B:B4:06:4C:9A:64:FD:1E:90:30:A0:4E:C4:8F:D1:9B:91:DF:6C
X509v3 Authority Key Identifier:
keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/Oku0BkyaZP0ekDCgTsSP0ZuR32w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:eac0:2020::/44
Signature Algorithm: sha256WithRSAEncryption
15:0f:01:3a:b9:a6:7b:6d:19:ee:ea:4b:48:57:21:4b:b4:49:
0a:cd:e7:59:e4:4e:fa:29:bf:56:30:f1:ed:6a:f9:67:f2:e8:
1e:73:7e:f5:0f:a3:d4:ee:c6:52:92:54:4c:56:2d:55:60:05:
3c:4d:7b:09:56:1d:81:f9:d6:ef:c3:6a:ae:d5:10:82:06:ee:
0b:0d:1d:ee:7d:5d:48:de:a9:5f:b5:3d:ad:d4:97:3f:fd:ae:
50:8a:9c:19:23:12:2e:90:a3:d8:ae:eb:77:5a:13:be:90:9b:
15:5a:58:f5:e0:2b:24:2f:38:f5:45:d9:44:cf:4c:4d:de:1c:
80:66:2b:44:d3:4a:b0:f6:46:c5:70:09:15:51:c8:31:b7:f6:
de:5c:a5:29:90:33:41:6e:df:fb:49:e6:02:02:c3:41:e4:8d:
4e:ae:e7:81:75:16:75:d5:c3:0c:b1:a9:60:b1:29:b2:2b:e1:
2e:85:3d:66:3f:cb:c9:66:d9:2f:1d:31:4e:69:a2:be:50:43:
5f:cf:a1:5c:41:5c:68:49:9c:32:1f:53:a1:19:c3:4b:d4:8f:
c2:16:1e:2b:fd:2e:f7:56:1c:d3:fb:62:06:56:9a:85:8e:6d:
fe:1f:57:34:ef:89:56:90:ad:59:2e:be:c8:2a:66:6e:ae:85:
3e:b8:0f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:12 2024 by rpki-client on console.sobornost.net